StaticStore Search Engine Friendly E-Commerce XSS

StaticStore Search Engine Friendly E-Commerce XSS Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html vendor:www.staticstore.com affected version:1.189A and prior Product Description: StaticStore is a full sto...

MarmaraWeb E-commerce Remote Command Exucetion

MarmaraWeb E-commerce Remote Command Exucetion Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- MarmaraWeb E-commerce Remote Command Exucetion ----------------------------------- Site:...

MarmaraWeb E-commerce Script Cross Site Scripting

MarmaraWeb E-commerce Script Cross Site Scripting Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- MarmaraWeb E-commerce Script Cross Site Scripting ----------------------------------- Site:...

MarmaraWeb E-Commerce - index.php?page Cross-Site Scripting

MarmaraWeb E-Commerce - index.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/15875/info E-commerce is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

MarmaraWeb E-Commerce - 'index.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15875/info E-commerce is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

MarmaraWeb E-Commerce - Remote File Inclusion

source: https://www.securityfocus.com/bid/15877/info E-commerce is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious...

MarmaraWeb E-Commerce - Remote File Inclusion

MarmaraWeb E-Commerce - Remote File Inclusion source: https://www.securityfocus.com/bid/15877/info E-commerce is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include ...

CVE-2005-4081

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in 1 the user login and 2 administrator login pages...

CVE-2005-4081

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in 1 the user login and 2 administrator login pages...

CVE-2005-4081

CVE-2005-4081 involves multiple SQL injection vulnerabilities in Alisveristr E-commerce. The issues affect login functionality (user and administrator login pages) and allow remote attackers to bypass authentication and potentially execute arbitrary SQL commands through the username and password ...

alisveristrSQL.txt

Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- Alisveristr E-commerce User Login Sql İnjection Alisveristr E-commerce Admin Login Sql İnjection ----------------------------------- Site:...

CVE-2005-4018

SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 start, 2 searchorder, 3 searchtype, 4 searcharea, and 5 keyword parameters...

CVE-2005-4018

The connected records confirm a SQL injection vulnerability in LandShop Real Estate Commerce System 0.6.3 and earlier via ls.php, exploitable through parameters (start, search_order, search_type, search_area, keyword). The root cause is likely unsanitized user input incorporated into SQL queries,...

Widget Imprint SQL inj. vuln.

Widget Imprint SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html Vendor:http://www.widgetpress.com/products?product=wimprint affected version: 1.0.26 and prior Product Description: Database driven web...

Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution:

Zen-Cart = 1.2.6d blind SQL injection / remote commands execution: software: site: http://www.zencart.com/ description:"Zen Cart™ truly is the art of e-commerce; a free, user-friendly, open source shopping cart system. The software is being developed by group of like-minded shop owners,...

Alisveristr E-Commerce Admin Login SQL İnjection

Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- Alisveristr E-commerce User Login Sql njection Alisveristr E-commerce Admin Login Sql njection ----------------------------------- Site: http://www.alisveristr.c...

Alisveristr E-Commerce Login - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15699/info Alisveristr E-commerce is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

Alisveristr E-Commerce Login - Multiple SQL Injections

Alisveristr E-Commerce Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/15699/info Alisveristr E-commerce is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in a...

Commodity Rentals 2.x "user_id" Sql inj.

Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html Vendor:http://www.commodityrentals.com/ affected version: 2.x and prior Product Description: CommodityRentals is the most comprehensive Online Rental Business...

Affcommerce Multiple Sql inj.

Affcommerce Multiple Sql inj. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/affcommerce-multiple-sql-inj.html Vendor:http://www.affcommerce.com/ affected version:1.1.4 Product Description: Affcommerce is a unique, one of its kind affiliate based...